5.4 Certificates
5.4.1 Request Certificate
1. Open the Exchange Management Shell and enter the following cmdlet
Set-Content -path "d:\mail_cert.req" -Value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "C=XX, S=XX, L=XX, O=XX Limited, OU=IT, CN=mail.limws.com" -DomainName mail.limws.com, autodiscover.limws.com -PrivateKeyExportable $True)
2. The request file will be generated into d:\. Get the mail_cert.req file and submit to the authorize certificate authority. DigiCert is selected, thus submit the mail_cert.req file to DigiCert
3. DigiCert will issue a certificate after the submission the mail_cert.req file. Get the certificate and copy into the server that you request mail_cert.req in step 1
4. Logon to Exchange admin center and navigate to server > certificate. Select the certificate request you created in the previous steps. In the certificate request details pane, click Complete under Status.
6. The pending request was completed
1. Open the Exchange Management Shell and enter the following cmdlet
Set-Content -path "d:\mail_cert.req" -Value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "C=XX, S=XX, L=XX, O=XX Limited, OU=IT, CN=mail.limws.com" -DomainName mail.limws.com, autodiscover.limws.com -PrivateKeyExportable $True)
2. The request file will be generated into d:\. Get the mail_cert.req file and submit to the authorize certificate authority. DigiCert is selected, thus submit the mail_cert.req file to DigiCert
3. DigiCert will issue a certificate after the submission the mail_cert.req file. Get the certificate and copy into the server that you request mail_cert.req in step 1
4. Logon to Exchange admin center and navigate to server > certificate. Select the certificate request you created in the previous steps. In the certificate request details pane, click Complete under Status.
5. On the Complete pending request page, specify the path to the SSL certificate file in step 3 and then click OK.
6. The pending request was completed
5.4.2 Export Certificate
1. Select the certificate and choose Export Exchange Certificate.
2. Enter the network path to export with password.
3. The certificate was exported.
5.4.3 Import Certificate
1. Select server to Import Exchange Certificate
2. Enter the path and password for the import certificate.
3. Specify the servers by clicking “+” to add in the server.
4. The certificate was imported into servers.
5.4.4 Assign Service to Certificate
1. Select the new certificate you just added, and then click Edit “
” icon.
2. On the certificate page, click Services. Select the services you want to assign to this certificate. At minimum, you should select SMTP and IIS. Click Save.
3. If you receive the warning Overwrite the existing default SMTP certificate?, click Yes.
4. Service was assigned.
5. Repeat step 1 to step 4 for EXCH02.
No comments:
Post a Comment